REMARKS 

In view of the following remarks, Applicant respectfully requests 
reconsideration and allowance of the subject application. This amendment is 
believed to be fully responsive to all issues raised in the January 19, 2006 
5 Office Action. 

Claim Amendments 

Claims 5, 7-9, 17, 18, 20, 23, 27, 28, 30-32, and 34 are cancelled. 
Claims 1,3, 10, 19, 21, and 22 are amended. 

10 

Rejections to the Claims 
35 U.S.C. 103(a) 

Claims 1-10, 17-23, 27, 28, 30-32, and 34 are rejected under 35 U.S.C. 
103(a) as being unpatentable over U.S. Patent Number 6,499,109 issued to 
15 Balasubramaniam et al. (herein referred to as "Bal") in view of U.S. Patent 
Number 6,253,323 issued to Cox et al. (herein referred to as "Cox"). 

As shown above, claims 5, 7-9, 17, 18, 20, 23, 27, 28, 30-32, and 34 are 
cancelled, rendering the rejection of these claims moot. Furthermore, claims 1 , 
3, 10, 19, 21, and 22 are amended. Accordingly, pending claims 1-4, 6, 10, 19, 
20 21 , and 22 are discussed below with respect to Bal and Cox. 

Applicant's application describes techniques for limiting access to 
potentially dangerous code. A control object made up of executable code may 
be downloaded to a client device via a web page. Other web pages may then 



leejphayes 



6 



051S061344 9OS054.DOC 



attempt to execute the control object that was previously downloaded. To 
ensure that the control object is not invoked maliciously. Applicant's application 
describes digitally signing a web page that invokes a control object before the 
web page is delivered to a client computer. Applicant's application also 
5 describes authenticating the source of a web page that attempts to invoke the 
control object, and then verifying that the identified source is authorized to 
invoke the control object. The authentication is performed based on the digital 
signature that is associated with a web page that attempts to invoke the control 
object. The authorization may be perfonned in any of a number of ways, 
10 including, but not limited to, comparing the source of the web page with a list of 
authorized sources. If either the authentication or the authorization fails, then 
the control object is not invoked. 

Specifically, claim 1, as amended, recites: 

A method, comprising: 
15 deriving a digital signature and associating the digital 

signature with a web page only if the web page includes code to 

invoke a control object; and 

delivering the web page to an electronic device capable of 

authenticating the digital signature such that the electronic device 
20 can execute at least a portion of the web page after the digital 

signature is authenticated. 

Bal describes verifying the source of software downloaded from a remote 
site to a client computer over a computer network before the software can be 
25 executed on the client computer. (Bal, Abstract.) Specifically, Bal describes a 
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computer-executable program code that first determines the URL to which a 
browser running on the client computer is pointed and enables the downloaded 
software program only if the URL to which the browser is pointed is an 
authorized URL. (Bal, Summary.) 
5 Cox describes multiple embodiments of an object-based digital signature 

that may allow digital signatures to approve or verify portions of documents, 
address issues associated with the temporal ordering of digital signatures, and 
allow information dispersed over a network of connputing systems to be verified 
or approved. (Cox, column 6, lines 13-23.) Cox also describes an object based 

10 digital signature that allows digital signatures to approve or validate portions of 
documents. (Cox, column 6, lines 55-57.) 

Neither Bal nor Cox teach or suggest "deriving a digital signature and 
associating the digital signature with a web page only /f the web page includes 
code to invoke a control object," as recited in amended claim 1. Accordingly, 

1 5 claim 1 is allowable over Bal in view of Cox. 

Claims 2-4, 6, 10, 19, 21, and 22 are allowable by virtue of their direct or 
indirect dependence on claim 1. Furthermore, one or more of claims 2-4, 6, 10, 
19,21, and 22 may also be allowable over Bal in view of Cox for other reasons. 
20 For example, claim 3 recites, "in an event that the web page does not 

include code to invoke the control object, delivering the web page without a 
digital signature." Neither Bal nor Cox teach or suggest delivering a web page 
without a digital signature in an event that the web page does not include code 
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in invoke a control object. Bal does not teach or suggest digitally signing any 
web pages; and Cox describes a way in which web pages can be digitally 
signed, but does not suggest conditionally signing a web page based on 
whether or not the web page includes code to invoke a control object. 
5 Accordingly, claim 3 is also allowable over Bal in view of Cox. 

Conclusion 

Claims 1-4, 6, 10, 19, 21, and 22 are believed to be in condition for 
allowance. Applicant respectfully requests reconsideration and prompt 
10 issuance of the present application. Should any issue remain that prevents 
immediate issuance of the application, the Examiner is encouraged to contact 
the undersigned agent to discuss the unresolved issue. 



Respectfully Submitted, 

Lee & Hayes, PLLC 

421 W. Riverside Avenue, Suite 500 

Spokane, WA 99201 




Name: Kayla D. Brant 
Reg. No. 46,576 

Phone No. (509) 324-9256 ext. 242 
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